Should I block it?

No, this file is 100% safe to run.

Additional versions

9.8.4.4	23.08%
9.4.9.9	7.69%
9.4.8.8	7.69%
9.4.6.4	7.69%
9.4.3.4	7.69%
9.3.9.9	7.69%
9.3.4.5	7.69%
9.3.3.5	7.69%
9.1.7.7	7.69%
9.1.6.8	7.69%
9.1.5.7	7.69%

Relationships

Parent process

services.exe (Services and Controller app by Microsoft)

Related files

PE file structure

Show functions

Import table

advapi32.dll

ConvertStringSecurityDescriptorToSecurityDescriptorW, GetNamedSecurityInfoW, OpenProcessToken, GetTokenInformation, RegOpenKeyExW, RegQueryValueExW, RegCloseKey, QueryServiceStatus, EncryptFileW, DecryptFileW, SetNamedSecurityInfoW, ControlService, QueryServiceStatusEx, StartServiceW, DeleteService, CreateServiceW, OpenSCManagerW, OpenServiceW, CloseServiceHandle, RegisterServiceCtrlHandlerW, SetServiceStatus, StartServiceCtrlDispatcherW, RegEnumKeyExW, LogonUserW, DuplicateTokenEx, ImpersonateLoggedOnUser, OpenThreadToken, LookupPrivilegeValueW, RegEnumKeyA, RegDeleteKeyA, RegQueryValueExA, RegOpenKeyA, RegSetValueExA, AdjustTokenPrivileges, RegCreateKeyA, RegisterEventSourceA, ReportEventA, DeregisterEventSource, RegOpenKeyExA, RegQueryValueA, GetSidSubAuthorityCount, GetSidSubAuthority, RegQueryInfoKeyW, SetFileSecurityW, ConvertSecurityDescriptorToStringSecurityDescriptorW, LookupAccountNameW, MakeSelfRelativeSD, GetSecurityDescriptorControl, GetSecurityDescriptorLength, IsValidSid, CryptCreateHash, CryptDecrypt, CryptEncrypt, CryptHashData, CryptAcquireContextW, CryptReleaseContext, CryptDeriveKey, CryptDestroyKey, CryptDestroyHash, CopySid, GetLengthSid, ConvertSidToStringSidW, GetUserNameW, RegDeleteKeyW, RegSetValueExW, RegCreateKeyExW

comctl32.dll

_TrackMouseEvent

crypt32.dll

CryptProtectData, CryptUnprotectData, CertEnumCertificatesInStore, CertOpenSystemStoreW, CertCloseStore, CertFindCertificateInStore, CertNameToStrW

gdi32.dll

DeleteObject, SelectObject, GetObjectW, SetBkMode, SetTextColor, DeleteDC, CreateFontIndirectW, GetStockObject, CreateCompatibleDC, GetTextExtentPoint32W, GetTextMetricsW, GetDeviceCaps

iphlpapi.dll

GetBestInterface, GetAdaptersInfo, GetIpNetTable

kernel32.dll

DllMain

mpr.dll

WNetGetLastErrorW, WNetOpenEnumW, WNetEnumResourceW, WNetGetConnectionW, WNetAddConnection2W, WNetCancelConnection2W, WNetCloseEnum

netapi32.dll

NetShareEnum, NetApiBufferFree, Netbios

ole32.dll

CoTaskMemAlloc, OleInitialize, OleUninitialize, CLSIDFromString, CoTaskMemFree, CoCreateGuid, CoInitializeEx, CoUninitialize, StringFromGUID2, CoGetObject, CoCreateInstance

shell32.dll

SHGetFolderPathW, SHIsFileAvailableOffline, SHGetDesktopFolder, SHGetFolderLocation, ShellExecuteExW, SHGetDiskFreeSpaceExW, ShellExecuteW

shlwapi.dll

StrRetToStrW, StrCmpW, StrStrW, StrCmpIW, StrCmpNW, StrFormatByteSizeW, StrToIntW

user32.dll

GetSystemMetrics, GetWindowRect, OffsetRect, MessageBoxW, GetUserObjectInformationW, GetProcessWindowStation, SetDlgItemTextW, SetWindowLongW, GetWindowLongW, SetTimer, KillTimer, GetForegroundWindow, UnregisterClassA, MessageBoxA, GetDesktopWindow, GetParent, GetDlgItem, SendMessageW, IsWindow, GetCapture, ReleaseCapture, SetWindowPos, MapWindowPoints, GetClientRect, SystemParametersInfoW, GetWindow, InflateRect, EndDialog, DestroyIcon, LoadIconW, SetFocus, LoadImageW, DialogBoxIndirectParamW, SetWindowTextW, DestroyWindow, DefWindowProcW, SetRectEmpty, GetWindowTextW, GetWindowTextLengthW, ScreenToClient, UpdateWindow, InvalidateRect, IsWindowEnabled, SetCapture, GetDlgCtrlID, CallWindowProcW, PtInRect, DrawTextW, FillRect, DrawFocusRect, CreateWindowExW, SetCursor, GetCursorPos, CharNextW, BeginPaint, EndPaint, GetDC, ReleaseDC, GetFocus, GetSysColor, LoadCursorW, GetClassNameW, CreateDialogIndirectParamW, CheckDlgButton, IsDlgButtonChecked, GetQueueStatus, GetClipboardOwner, FindWindowA, DispatchMessageA, PeekMessageA, IsWindowUnicode, MsgWaitForMultipleObjects, TranslateMessage, DispatchMessageW, PeekMessageW

userenv.dll

UnloadUserProfile

version.dll

GetFileVersionInfoSizeW, GetFileVersionInfoW, VerQueryValueW

wininet.dll

InternetCloseHandle, InternetGetLastResponseInfoW, HttpQueryInfoW, InternetReadFile, InternetWriteFile, InternetSetOptionW, InternetSetOptionExW, InternetConnectW, InternetOpenW, InternetGetCookieExW, HttpSendRequestW, HttpAddRequestHeadersW, HttpEndRequestW, HttpSendRequestExW, HttpOpenRequestW, InternetQueryOptionW, InternetGetCookieW

ws2_32.dll

getaddrinfo, freeaddrinfo

gs-server.exe

GoodSync Server by Siber Systems Inc (Signed)

Remove gs-server.exe

Version:	9.3.3.5
MD5:	b967c66e9be894da27ec3180ed568072
SHA1:	d4712de7695cc3196e95e54363b9c662fc9d4ce6
SHA256:	11a2007486d063c6b68c0ff70bb66dbf61b8d4360686e468fe9da44ab99fc8ff

Overview

gs-server.exe runs as a service under the name GsServer (GsServer) with extensive SYSTEM privileges (full administrator access). This is typically installed with the program GoodSync published by Siber Systems. The file is digitally signed by Siber Systems Inc which was issued by the COMODO CA Limited certificate authority (CA).

Details

File name:	gs-server.exe
Product name:	GoodSync Server
Typical file path:	C:\Program Files\siber systems\goodsync\gs-server.exe
File version:	9.3.3.5
Size:	5.28 MB (5,536,472 bytes)
Build date:	9/23/2012 10:39 PM
Certificate
Issued to:	Siber Systems Inc
Authority (CA):	COMODO CA Limited
Effective date:	Sunday, February 12, 2012
Expiration date:	Sunday, February 12, 2017
Digital DNA
PE subsystem:	Windows Console
File packed:	No
.NET CLR:	No

More details

Programs

The following program will install this file

GoodSync

Siber Systems

3% remove

GoodSync is a backup and file synchronization program. It is used for synchronizing files between two directories, either on one computer, or between a computer and another storage device (e.g. another computer, a removable disc, a flash drive or a smartphone) or between a computer and a remote computer or server. Goodsync allows the same version of files to be maintained on multiple computing devices. In other words, when two devices a...

Behaviors

Services

Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)

GsServer
'GsServer' (GoodSync Server)

Network connections

[UDP] listens on port 33338

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00019039%	0.028634%
Kernel CPU:	0.00017949%	0.013761%
User CPU:	0.00001089%	0.014873%
Kernel CPU time:	16,692 ms/min	100,923,805ms/min
CPU cycles:	999,411/sec	17,470,203/sec
Memory
Private memory:	6.89 MB	21.59 MB
Private (maximum):	10.17 MB
Private (minimum):	9.52 MB
Non-paged memory:	6.89 MB	21.59 MB
Virtual memory:	75.88 MB	140.96 MB
Virtual memory (peak):	78.01 MB	169.69 MB
Working set:	10.15 MB	18.61 MB
Working set (peak):	10.19 MB	37.95 MB
Page faults:	7,436/min	2,039/min
I/O
I/O read transfer:	0 Bytes/sec	1.02 MB/min
I/O read operations:	1/sec	343/min
I/O write transfer:	806 Bytes/sec	274.99 KB/min
I/O write operations:	12/sec	227/min
I/O other transfer:	2.97 KB/sec	448.09 KB/min
I/O other operations:	116/sec	1,671/min
Resource allocations
Threads:	12	12
Handles:	162	600

Process properties

Integrety level:	System
Platform:	64-bit
Command line:	"C:\Program Files\siber systems\goodsync\gs-server.exe" /service
Owner:	SYSTEM
Windows Service
Service name:	GsServer
Display name:	GsServer
Description:	“Allow network discovery and access to this computer via GSTP protocol”
Type:	Win32OwnProcess
Parent process:	services.exe (Services and Controller app by Microsoft)

Distribution by Windows OS

OS version	distribution
Windows 7 Home Premium	30.77%
Microsoft Windows XP	30.77%
Windows 7 Professional	23.08%
Windows 7 Ultimate	15.38%

Distribution by country

United States installs about 76.92% of GoodSync Server.

Distribution by PC manufacturer

PC Manufacturer	distribution
Toshiba	30.77%
Hewlett-Packard	23.08%
Dell	15.38%
Intel	15.38%
Sahara	7.69%
GIGABYTE	7.69%

Remove Adware and Spyware Programs, FREE Download!